CVE-2026-97032

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,530; of 18,090 indexed, latest versions
Container images: 6,374; deployed by those charts
Fix available: 6 of 9; affected packages

HTTP/2 server crash due to HPACK encoder race in net/http

Carried by container images the latest versions of 5,530 of 18,090 indexed charts deploy, on 6,374 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9, 1.27.2	6,355
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+227 more	0.60.0	5,126
golang-1.19deb	1.19.8-2	no fix listed	1
helm-4apk	4.3.0-r0	4.3.0-r2	1
ingress-nginx-controller-1.15apk	1.15.10-r3	no fix listed	1
kineapk	0.17.1-r1	0.17.2-r2	1
kubernetes-1.37apk	1.37.1-r0	1.37.1-r2	1
runcapk	1.5.2-r0	no fix listed	1
tetragonapk	1.7.1-r4	1.7.1-r6	1

OSV records: CGA-387c-5f4p-4rh4 CGA-4653-rw6m-872g CGA-4h9w-grf4-6jpp CGA-8xvx-5mh6-vrc3 CGA-f937-jwj2-rj5j CGA-fjhw-67fq-pm89 DEBIAN-CVE-2026-97032 GO-2026-6617
Also known as: CGA-3qgw-9846-f468, CGA-499x-7xc5-927w, CGA-4qpc-rjrp-f4h4, CGA-5pv4-5xjw-qg97, CGA-5rcr-cqmr-f8hp, CGA-5vh8-jrpp-m4r3, CGA-8g7x-r6mw-97j8, CGA-8mf9-xfh8-jx3h, CGA-923f-66wm-xfq4, CGA-9hgh-r65w-7q99, CGA-fjfp-jwwq-vjp3, CGA-gg5j-j7wm-wf6w, CGA-jrgf-gwq3-rf5w, CGA-m46j-x3g6-mqj4, CGA-mq7q-c763-9cvx, CGA-p4p3-mvmj-v95v, CGA-qpfw-4v8x-3667, CGA-qpqr-hw3x-7qxj, CGA-qqxw-hjpg-6rhv, CGA-r654-5gg7-p6xf, CGA-rggh-6rrq-mfp4, CGA-rwc6-gqq6-4p7r, CGA-vh2x-9247-h576, CGA-w2j8-94m3-rxc6, CGA-w2rp-6hc9-f8qw, CGA-w39g-2gpg-cfqr
Trending: Rank 6 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,530 by stars

Chart

Latest

Affected images

Radar Score

doris-foundationdbdoris

25.8.0

1 of 4 See more

doris-foundationdb doris 25.8.0

1 of the 4 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
foundationdb/fdb-kubernetes-operator :v2.3.0	7d7b6985291e	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.60.0 1.26.9

Open the chart page →

4,297

redminebotdossif

0.1.7

1 of 1 See more

redminebot dossif 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
dossif/redminebot :0.2.2	96dcd2c0e9f2	stdlib@go1.17.13	1.26.9

Open the chart page →

1,496

aliyun-exporterdouban

0.1.2

1 of 1 See more

aliyun-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/douban/aliyun-exporter :main	b7c694331362	stdlib@go1.24.2	1.26.9

Open the chart page →

1,306

channelsdouban

1.1.2

1 of 1 See more

channels douban 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
everpcpc/channels :latest	b378d137ae8b	stdlib@go1.17	1.26.9

Open the chart page →

3,472

codecovdouban

0.2.4

2 of 8 See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
codecov/self-hosted-gateway :24.4.1	de483faad6e5	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.60.0 1.26.9
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	stdlib@go1.19.1	1.26.9

Open the chart page →

27,573

corednsdouban

1.39.2

1 of 1 See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
coredns/coredns :1.12.0	40384aa1f5ea	golang.org/x/net@v0.31.0 stdlib@go1.23.3	0.60.0 1.26.9

Open the chart page →

1,672

gatekeeperdouban

3.17.1

2 of 3 See more

gatekeeper douban 3.17.1

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.60.0 1.26.9
openpolicyagent/gatekeeper-crds :v3.17.1	77bc9bf3d163	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.60.0 1.26.9

Open the chart page →

3,447

goinceptiondouban

0.3.1

1 of 2 See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
hanchuanchuan/goinception :latest	b3c0dd26fb50	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

1,754

k8s-crondouban

0.2.0

1 of 1 See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/net@v0.9.0 stdlib@go1.20.8	0.60.0 1.26.9

Open the chart page →

4,456

overlorddouban

0.2.2

1 of 1 See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
douz/overlord :latest	f2bc7fc068c1	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.5	0.60.0 1.26.9

Open the chart page →

5,640

prometheus-memcached-exporterdouban

0.1.3

1 of 1 See more

prometheus-memcached-exporter douban 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

3,237

qiniu-exporterdouban

0.1.2

1 of 1 See more

qiniu-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/douban/qiniu-exporter :main	d1da3bcfad7d	stdlib@go1.19.5	1.26.9

Open the chart page →

1,970

service-proberdouban

0.1.0

1 of 1 See more

service-prober douban 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.60.0 1.26.9

Open the chart page →

945

tencentcloud-exporterdouban

0.2.2

1 of 1 See more

tencentcloud-exporter douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/leoquote/tencentcloud-exporter :master	ca51b6bb15dd	stdlib@go1.21.1	1.26.9

Open the chart page →

1,919

tencentcloud-info-exporterdouban

0.2.2

1 of 1 See more

tencentcloud-info-exporter douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.18.3	0.60.0 1.26.9

Open the chart page →

3,242

ucloud-exporterdouban

0.1.3

1 of 1 See more

ucloud-exporter douban 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/douban/ucloud-exporter :main	b4bb8a9021a2	stdlib@go1.24.2	1.26.9

Open the chart page →

1,322

upyun-exporterdouban

0.1.2

1 of 1 See more

upyun-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/douban/upyun-exporter :main	6810900c9c4a	stdlib@go1.25.5	1.26.9

Open the chart page →

1,096

eoloplannerdreyg-jescribanob-chart-eoloplanner

0.1.0

2 of 7 See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.26.9
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	stdlib@go1.15.6	1.26.9

Open the chart page →

28,438

drogue-cloud-examplesdrogue-iot

0.7.11

3 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

3 of the 6 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.60.0 1.26.9
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	stdlib@go1.15.6	1.26.9
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.60.0 1.26.9

Open the chart page →

34,551

drogue-cloud-metricsdrogue-iot

0.7.11

6 of 8 See more

drogue-cloud-metrics drogue-iot 0.7.11

6 of the 8 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.9
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.26.9
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.60.0 1.26.9
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.60.0 1.26.9

Open the chart page →

20,186

drone-kubernetes-secretsdrone

0.1.4

1 of 1 See more

drone-kubernetes-secrets drone 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/net@v0.0.0-20180811021610-c39426892332 stdlib@go1.13.15	0.60.0 1.26.9

Open the chart page →

3,908

mtr-exporterdrpsychick

0.0.5

1 of 1 See more

mtr-exporter drpsychick 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/mgumz/mtr-exporter :0.4.0	f4691c8fe8eb	stdlib@go1.22.8	1.26.9

Open the chart page →

756

piraeusdtrdnk-helm-charts

2.2.0

1 of 1 See more

piraeus dtrdnk-helm-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/piraeus-operator :v2.2.0	ec4022c8b0e3	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

1,784

rook-cephdtrdnk-helm-charts

0.0.1

2 of 2 See more

rook-ceph dtrdnk-helm-charts 0.0.1

2 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rook/ceph :v1.19.2	944a1dd70496	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.60.0 1.26.9
quay.io/cephcsi/ceph-csi-operator :v0.5.0	14fe2f1bffc3	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9

Open the chart page →

2,839

tempo-operatordtrdnk-helm-charts

0.0.3

1 of 2 See more

tempo-operator dtrdnk-helm-charts 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/tempo-operator/tempo-operator :v0.4.0	2627be646391	golang.org/x/net@v0.12.0 stdlib@go1.21.0	0.60.0 1.26.9

Open the chart page →

1,515

temporaldtrdnk-helm-charts

0.35.0

8 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

8 of the 13 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.60.0 1.26.9
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.9
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.60.0 1.26.9
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/net@v0.8.0 stdlib@go1.20.10	0.60.0 1.26.9
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/net@v0.7.0 stdlib@go1.20.11	0.60.0 1.26.9
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.60.0 1.26.9
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.60.0 1.26.9
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.17.3	0.60.0 1.26.9

Open the chart page →

28,079

cloudflaredduck-helm

1.1.3

1 of 1 See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0 stdlib@go1.24.13	0.60.0 1.26.9

Open the chart page →

1,968

postgres-backup-localduck-helm

0.1.5

1 of 1 See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
prodrigestivill/postgres-backup-local :latest	f70742ebe42b	stdlib@go1.22.6	1.26.9

Open the chart page →

4,211

dumpstoredumpstore

0.1.1

1 of 2 See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/manzil-infinity180/frontend-dumpstore :226f28ca3efa6d3691044813cd09085e28d4a7b4	4e6394b715d9	stdlib@go1.20.12	1.26.9

Open the chart page →

5,165

duplicacyduplicacy

0.1.3

1 of 2 See more

duplicacy duplicacy 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/net@v0.10.0 stdlib@go1.21.13	0.60.0 1.26.9

Open the chart page →

3,153

applause-btnduyet

0.1.3

1 of 1 See more

applause-btn duyet 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
duyetdev/applause-btn :latest	25e59d223eaa	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.14.9	0.60.0 1.26.9

Open the chart page →

3,773

commentoduyet

0.2.0

1 of 2 See more

commento duyet 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/net@v0.0.0-20180811021610-c39426892332 stdlib@go1.14.2	0.60.0 1.26.9

Open the chart page →

3,910

kubernetes-database-scalerdvdlevanon

0.1.2

1 of 1 See more

kubernetes-database-scaler dvdlevanon 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
dvdlevanon/kubernetes-database-scaler :v0.0.36	1e79c1643fe4	golang.org/x/net@v0.8.0	0.60.0

Open the chart page →

1,167

ai-scale-authdysnix

0.1.1

2 of 3 See more

ai-scale-auth dysnix 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-auth :latest	6c7a47e470c3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.12	0.60.0 1.26.9
alex6021710/ai-scale-migrator :latest	744b8a924f35	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.2	0.60.0 1.26.9

Open the chart page →

8,245

ai-scale-doerdysnix

0.1.0

1 of 1 See more

ai-scale-doer dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-doer :latest	31e533cf7cd3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.10	0.60.0 1.26.9

Open the chart page →

3,828

ai-scale-providerdysnix

0.1.0

1 of 1 See more

ai-scale-provider dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-provider :latest	5837d9b30cc7	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.15.8	0.60.0 1.26.9

Open the chart page →

3,314

ai-scale-saverdysnix

0.1.0

1 of 1 See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-saver :latest	f73e8d60fd03	golang.org/x/net@v0.0.0-20211105192438-b53810dc28af stdlib@go1.17	0.60.0 1.26.9

Open the chart page →

3,202

arbitrumdysnix

0.1.1

1 of 1 See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/net@v0.21.0 stdlib@go1.21.10	0.60.0 1.26.9

Open the chart page →

10,364

bitcoinddysnix

0.4.3

1 of 2 See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	stdlib@go1.22.2	1.26.9

Open the chart page →

2,568

bordysnix

0.0.8

1 of 1 See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
0xpolygon/bor :1.3.7	396d3de26d8b	golang.org/x/net@v0.26.0 stdlib@go1.22.1	0.60.0 1.26.9

Open the chart page →

1,942

gcp-local-ssd-raiddysnix

0.1.7

1 of 2 See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	golang.org/x/net@v0.37.0 stdlib@go1.23.4	0.60.0 1.26.9

Open the chart page →

2,910

gke-upgrade-notification-handlerdysnix

0.1.1

1 of 1 See more

gke-upgrade-notification-handler dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
dysnix/gke-upgrade-notification-handler :latest	c166f958f86a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.7	0.60.0 1.26.9

Open the chart page →

3,058

grafana-dashboardsdysnix

0.2.2

1 of 2 See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
grafana/grafana :7.4.5	d322192ed2fa	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.6	0.60.0 1.26.9

Open the chart page →

6,349

heimdalldysnix

0.0.1

1 of 1 See more

heimdall dysnix 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
0xpolygon/heimdall :1.0.1	34ddf259993c	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.60.0 1.26.9

Open the chart page →

1,999

local-path-provisionerdysnix

0.0.20

1 of 1 See more

local-path-provisioner dysnix 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.20	d5999b20a1b1	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.6	0.60.0 1.26.9

Open the chart page →

3,997

pritunldysnix

0.2.7

1 of 3 See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/dysnix/bitnami/mongodb :4.4.11-debian-10-r5	073116e61007	stdlib@go1.16.12	1.26.9

Open the chart page →

6,934

servicemonitor-appsdysnix

0.1.0

1 of 1 See more

servicemonitor-apps dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ethpandaops/ethereum-metrics-exporter :0.21.0	d1780db2e286	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.18.10	0.60.0 1.26.9

Open the chart page →

2,333

smokeping-proberdysnix

0.3.1

1 of 1 See more

smokeping-prober dysnix 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
superque/smokeping-prober :v0.11.0	28ca636d1dee	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.60.0 1.26.9

Open the chart page →

794

eav-componenteav-component

1.0.0

1 of 3 See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.60.0 1.26.9

Open the chart page →

9,074

echoappechoapp

0.1.0

1 of 1 See more

echoapp echoapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-97032.

Container image	Digest	Package	Fixed in
hashicorp/http-echo :1.0.0	fcb75f691c8b	stdlib@go1.21.1	1.26.9

Open the chart page →

1,030

Container images carrying it

6,374 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.60.0 1.26.9	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	golang.org/x/net@v0.55.0 stdlib@go1.26.4	0.60.0 1.26.9	6
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	6
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.60.0 1.26.9	6
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0 :v2.8.1	f6717ce72a26	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.60.0 1.26.9	6
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.60.0 1.26.9	6
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.60.0 1.26.9	6
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.60.0 1.26.9	5
bitnamilegacy/kubectl :1.29.2	c74b703deed2	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.60.0 1.26.9	5
containous/whoami :latest :v1.5.0	7d6a3c8f9147	stdlib@go1.14	1.26.9	5
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.60.0 1.26.9	5
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.60.0 1.26.9	5
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.60.0 1.26.9	5
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.60.0 1.26.9	5
grafana/tempo :2.9.0	65a578975943	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.60.0 1.26.9	5
keelhq/keel :latest	73714afb4443	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.60.0 1.26.9	5
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.26.9	5
library/mysql :26.7.0 :latest	ade067ae2fb1	stdlib@go1.24.6	1.26.9	5
library/postgres :17	2d2b8998d310	stdlib@go1.24.6	1.26.9	5
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.26.9	5
library/redis :7.4.2-alpine :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.26.9	5
library/redis :5 :5.0	fc5ecd863862	stdlib@go1.16.7	1.26.9	5
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.60.0 1.26.9	5
outcoldsolutions/collectorforkubernetes :26.04.5	b2577b85aa71	stdlib@go1.26.8	1.26.9	5
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.60.0 1.26.9	5
rancher/rancher :v2.15.2	0c3d8e570255	golang.org/x/net@v0.58.0 stdlib@go1.26.4	0.60.0 1.26.9	5
rancher/shell :v0.8.2	1eeed72d4eda	golang.org/x/net@v0.56.0 stdlib@go1.26.8	0.60.0 1.26.9	5
sigma2as/goidc-proxy :next	656ac798963a	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.60.0 1.26.9	5
ghcr.io/dexidp/dex :v2.46.0	933fcd3f5233	golang.org/x/net@v0.56.0 stdlib@go1.27.1	0.60.0 1.27.2	5
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.26.9	5
ghcr.io/paperless-ngx/paperless-ngx :3.3.0	6b94799bc769	stdlib@go1.24.4	1.26.9	5
ghcr.io/quenchworks/images/prometheus	a9dc21133c23	golang.org/x/net@v0.58.0 stdlib@go1.26.8	0.60.0 1.26.9	5
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.60.0 1.26.9	5
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.60.0 1.26.9	5
quay.io/prometheus/mysqld-exporter :latest :v0.20.0	abed8dac117b	golang.org/x/net@v0.57.0 stdlib@go1.26.5	0.60.0 1.26.9	5
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.60.0 1.26.9	5
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.60.0 1.26.9	5
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.60.0 1.26.9	5
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.55.0 stdlib@go1.26.5	0.60.0 1.26.9	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.60.0 1.26.9	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.60.0 1.26.9	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/net@v0.28.0 stdlib@go1.22.8	0.60.0 1.26.9	5
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.60.0 1.26.9	5
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.60.0 1.26.9	5
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.60.0 1.26.9	5
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.60.0 1.26.9	5
adguard/adguardhome :v0.107.79	aba9e3bf0613	golang.org/x/net@v0.57.0 stdlib@go1.26.6	0.60.0 1.26.9	4
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.26.9	4
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	stdlib@go1.25.0	1.26.9	4
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	stdlib@go1.24.6	1.26.9	4